SFTP Connection to Synology Diskstation
So far I was not able to access my Synology Diskstation (NAS) via SFTP. I activated all the necessary services according to Synology's documentation:
https://www.synology.com/en-us/knowledgebase/DSM/tutorial/File_Sharing/…
In Acronis True Image I cannot establish a test connection (error message "connection failed"). With Filezilla and the same credentials I can successfully establish an SFTP connection. Thanks in advance for your help.
Thanks for your reply.
I just installed Acronis Backup 11.7 for PC but I am still not able to establish a SFTP connection to my Sonology. The user prompt is being displayed repeatedly, as I would specify the wrong credentials but it works in Filezilla with the same credentials.
s-bit,
Have you tried connecting to your Synology using Windows file service? Or is SFTP your only option?
I am using Windows file service on my Synology with no problems.
FtrPilot
Hello s-bit,
I would suggest taking a look at the SFTP logs for possible additional details for the error:
https://kb.acronis.com/content/44576
It is possible that your configuration of SFTP on the NAS is not setup correctly for Backup 11.7. Example: You may have SSH setup under root and instead it needs to be setup under admin. Just a guess of course but what I am suggesting is the possibility of a settings problem exists.
I am not that familiar to Backup 11.7 but it is possible that you need to do some configuration in the app for integration with SSH.
The link below might give you a starting point to discover the issue:
http://www.acronis.com/en-us/support/documentation/AcronisBackup_11.7/i…
Hi FTRPilot,
Thanks for your reply and sorry for the late response.
The main reason why I did not want to use the Windows file service (always worked for me), was because of ransomware. I would assume, that a SFTP connection is more secure than a network share, directly accessible via Windows Explorer.
If your main concern is for ransomware protection, then you can use the same approach that I use with my Synology DS215 NAS box.
I have created a specific Acronis account on the Synology NAS just for the purpose of accessing my Backup folders - that Acronis account is only used for that purpose by ATIH 2015 / 2016 by the computers on my home network.
I do not map any network shares to the Synology NAS and my standard Windows accounts, including Administrator have no direct access to the NAS even though it can be seen in my Windows network. Any attempt to view the contents of the NAS result in a challenge for credentials. I can obviously sign-in to the NAS but never tick the box to let any system remember those credentials and these are forgotten afterwards.
I did enable SFTP for a while on the Synology NAS but to be honest got fed up by the volume of hacker attempts that I was getting many times a day as email alerts from the NAS where hackers are obviously looking for either open SFTP /SSH access or people using trivial credentials. I have since disabled SFTP / SSH access on the box and have enabled HTTPS for the web access plus also two-step verification using an Authenticator app on my phone to generate the required 6 digit code.
s-bit,
My setup is similar to Steve S's. Here's some additional considerations: I have 3 user accounts on my computer. Only one of the accounts has admin privileges. That account is only used for admin type things, including software updates & running ATI. In that account, absolutely no e-mail and minimum surfing. That way, a malware attack, through either of the other accounts, would only inherit "standard" privileges. Yes, the malware attack could still happen, but only to folders where the user has write privileges.
I also have 3 separate accounts on my Synology for ATI use. None of these accounts have Synology admin privileges. Each account only has access to 1 top level shared folder. Each account has its own top level folder, with different login credentials.
Like Steve S, I don't map the share folders, and I don't let programs, other than ATI store login credentials. If I try to access the Synology shares via Windows explorer, it pops up a window asking for credentials.
Unfortunately, ATI stores its login credentials through Windows credentials manager. Steve S, if you know a way around this, please let me know.
Hope this helps.
Regards,
FtrPilot